At RSA2012, McAfee, one of the conference's main sponsors, naturally has many opportunities to speak, and they have a statement about situational awareness (SA) that is actually talking about a newly acquired nitrosecurity thing. Their situational perception is basically a sense with Gartner's Si, which is context-aware (contextual awareness). In addition, the new model of risk calculation proposed by nitrosecurity is also worth learning, and it is a set of scoring mechanism in general.
Of course, they have made some prospects for the future development of Siem, including:
1 Modeling Behavior (profile)
2) based on Siem Do SA, they say they did it; hehe
3 combining SIEM with security threat intelligence is, of course, the natural advantage that McAfee itself has.
It seems that Nitro, under McAfee's umbrella, is still in high hopes.
This column more highlights: http://www.bianceng.cnhttp://www.bianceng.cn/Network/Security/